Bug 518273 - Vulnerability in kernel: NULL pointer dereference in load_flat_shared_library()
Summary: Vulnerability in kernel: NULL pointer dereference in load_flat_shared_library()
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: kernel
Version: 5.3
Hardware: All
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Red Hat Kernel Manager
QA Contact: Red Hat Kernel QE team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-08-19 17:19 UTC by Ethan Baker
Modified: 2009-08-19 20:51 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-08-19 20:51:00 UTC


Attachments (Terms of Use)

Description Ethan Baker 2009-08-19 17:19:44 UTC
Description of problem:
A NULL pointer dereference exists within the "load_flat_shared_library()" function in fs/binfmt_flat.c, which can be exploited to cause a crash and potentially execute arbitrary code with root privileges. (Quoted
from Secunia)

Version-Release number of selected component (if applicable):
ALL

Please refer to the following article. This concerns issue (3):

http://secunia.com/advisories/36278/

Comment 1 Mark J. Cox 2009-08-19 20:51:00 UTC
This is CVE-2009-2768 (and also duplicated as CVE-2009-2845)

Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, 5 or Red Hat Enterprise MRG. Red Hat does not provide support for flat binary support, and additionally this issue only affected kernels version 2.6.29-rc1 and later. 

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-2768


Note You need to log in before you can comment on or make changes to this bug.